Security model

The room is private. The record is precise.

Fileclad is designed for unreleased scripts, unfinished cuts, and deals that are not public yet. Security is enforced in the database, the file path, and the request — not just hidden in the interface.

Tenant isolation

Every tenant table carries an organization boundary and row-level security. Access is checked against the authenticated member, not the interface.

Private by default

Originals live in private storage. The viewer never receives a raw file URL; pages are served through an access-checked, watermarked endpoint.

Attributable reads

Per-recipient watermarks include the verified email, timestamp, and session. Downloads, when enabled, are watermarked and recorded.

Control at the link

Email verification, passcodes, allowlists, NDAs, expiry, device limits, country and IP rules, and instant revocation.

Expiring access

Links and live sessions can be killed in one action. Revocation is rechecked on every request, not cached in the browser.

Auditable operations

Sensitive workspace actions append to an immutable audit log. Analytics are recorded separately from the audit record.

The details

Strong deterrence. Honest boundaries.

No browser can make a screenshot impossible. Fileclad makes a leak attributable: the room knows who was there, what they saw, and when.

What is enforced

Tenant isolation, private storage, signed access checks, session revocation, link expiry, passcodes, email verification, NDA acceptance, dynamic watermarks, download and print permissions, audit logging, and rate limiting.

What is deterrence

Screenshot blocking, focus-loss blur, disabled shortcuts, and browser print restrictions reduce casual capture. They cannot defeat a determined user with a second camera. The watermark and recipient identity are the real controls.

What is not claimed

Fileclad is not SOC 2 certified today. Enterprise SSO depends on the Supabase plan. DRM-grade video (Widevine/FairPlay) is a future integration, not a browser feature. NDA acceptance is an audit-tracked workflow, not legal advice.